[Dovecot] dovecot-1.0-test27 crash on FETCH

[Wouter Van Hemel]

Hello,

I've got a crash with -test27 on a FETCH, just after logging in. Attached
are the mailbox (1 message only), logs, sniffed session, testcase and core
dump backtrace. If the dovecot.conf is needed, just ask (it's pretty much
the default configuration).

Maybe this has just been fixed in -test28, in which case you can just
delete this email. :)

Btw, it's rather irrelevant, but does anybody know a good way to read the
qmail alias user's mailbox remotely (imap? The only way seems by assigning
a password to the account...


Regards,

  wouter
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mailbox.gz
Type: application/octet-stream
Size: 306 bytes
Desc: mailbox which caused the crash
URL: <http://dovecot.org/pipermail/dovecot/attachments/20040712/725773b0/attachment-0001.obj>
-------------- next part --------------
1. dovecot mail log
-------------------
Jul 12 05:41:02 hibernate dovecot: imap-login: Login: wouter [192.168.196.6]
Jul 12 05:41:03 hibernate dovecot: child 13584 (imap) killed with signal 11


2. sniffed session
------------------

  1 capability
  * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN LISTEXT NAMESPACE
  1 OK Capability completed.

  2 login "wouter" "secret"
  2 OK Logged in.

  3 namespace
  * NAMESPACE (("" "/")) NIL NIL
  3 OK Namespace completed.

  4 lsub "" "*"
  4 OK Lsub completed.

  5 list "" "INBOX"
  * LIST (\NoInferiors) "/" INBOX
  5 OK List completed...

  6 select "INBOX"..
  * FLAGS (\Answered \Flagged \Deleted \Seen \Draft)
  * OK [PERMANENTFLAGS (\
  Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted.
  * 1 EXISTS
  * 0 RECENT
  * OK [UNSEEN 1] First unseen.
  * OK [UIDVALIDITY 1089602553] UI Ds valid
  * OK [UIDNEXT 2] Predicted next UID
  6 OK [READ-WRITE] Select completed.

  7 UID fetch 1:* (FLAGS)
  * 1 FETCH (UID 1 FLAGS ())
  7 OK Fetch completed.

  8 UID fetch 1 (UID RFC822.SIZE FLAGS BODY.PEEK[HEADER.FIELDS (From To Cc Su
  bject Date Message-ID Priority X-Priority References Newsgroups In-Reply-To)])

  <dovecot dies>


3. testcase
-----------

1 login "wouter" "secret"
2 select "INBOX"
3 UID fetch 1:* (FLAGS)
4 UID fetch 1 (UID RFC822.SIZE FLAGS BODY.PEEK[HEADER.FIELDS (From To Cc Subject Date Message-ID Priority X-Priority References Newsgroups
 In-Reply-To)])


4. telnet output testcase
-------------------------

[hibernate:~] telnet 192.168.196.2 143
Trying 192.168.196.2...
Connected to 192.168.196.2.
Escape character is '^]'.
* OK dovecot ready.
. login "wouter" "secret"
. OK Logged in.
. select "INBOX"
* FLAGS (\Answered \Flagged \Deleted \Seen \Draft)
* OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted.
* 1 EXISTS
* 0 RECENT
* OK [UNSEEN 1] First unseen.
* OK [UIDVALIDITY 1089602553] UIDs valid
* OK [UIDNEXT 2] Predicted next UID
. OK [READ-WRITE] Select completed.
. UID fetch 1:* (FLAGS)
* 1 FETCH (UID 1 FLAGS ())
. OK Fetch completed.
. UID fetch 1 (UID RFC822.SIZE FLAGS BODY.PEEK[HEADER.FIELDS (From To Cc Subject Date Message-ID Priority X-Priority References Newsgroups In-Reply-To)])
Connection closed by foreign host.
[hibernate:~]


5. coredump backtrace
---------------------
[hibernate:/home/wouter] gdb /usr/local/libexec/dovecot/imap /home/wouter/imap.core
GNU gdb 4.16.1
Copyright 1996 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-openbsd2.9"...
Core was generated by `imap'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/libexec/ld.so...done.
Reading symbols from /usr/lib/libc.so.26.2...done.
#0  0x24db5 in mail_cache_set_header_fields (ctx=0x6b200, idx=0, headers=0x57310) at mail-cache-transaction.c:555
555             i_assert(mail_cache_offset_to_uint32(cache->hdr->
(gdb) bt
#0  0x24db5 in mail_cache_set_header_fields (ctx=0x6b200, idx=0, headers=0x57310) at mail-cache-transaction.c:555
#1  0x205b3 in index_mail_headers_close (mail=0x6d21c) at index-mail-headers.c:776
#2  0x1f03d in index_mail_close (mail=0x6d21c) at index-mail.c:550
#3  0x1f320 in index_mail_deinit (mail=0x6d21c) at index-mail.c:642
#4  0x217c3 in index_storage_search_deinit (_ctx=0x6d200) at index-search.c:762
#5  0x31a80 in mailbox_search_deinit (ctx=0x6d200) at mail-storage.c:411
#6  0x7b23 in imap_fetch (client=0x64100, fetch_data=17, imap_data=IMAP_FETCH_UID, bodies=0x57078, search_args=0x57108) at imap-fetch.c:409
#7  0x2f8c in cmd_fetch (client=0x64100) at cmd-fetch.c:361
#8  0x54d2 in cmd_uid (client=0x64100) at cmd-uid.c:19
#9  0x5dca in client_handle_input (client=0x64100) at client.c:318
#10 0x5e7d in _client_input (context=0x64100) at client.c:354
#11 0x41f02 in io_loop_handler_run (ioloop=0x61040) at ioloop-poll.c:193
#12 0x41705 in io_loop_run (ioloop=0x61040) at ioloop.c:248
#13 0xc68c in main (argc=1, argv=0xdfbfdd08, envp=0xdfbfdd10) at main.c:181
(gdb)